mayar-v2

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill frequently uses npx -y mayar@latest to execute the official Mayar CLI tool directly from the NPM registry. This ensures the agent uses the most up-to-date version of the vendor's tooling.\n- [COMMAND_EXECUTION]: Executes shell commands using the mayar CLI for administrative tasks and integration setup, such as checking account status (whoami), registering webhooks, and fetching API documentation.\n- [DATA_EXFILTRATION]: Network operations are restricted to official Mayar domains (api.mayar.id and api.mayar.club) for payment processing and account management.\n- [CREDENTIALS_UNSAFE]: Appropriately manages sensitive credentials by instructing the user to store the MAYAR_API_KEY in environment variables (.env) and verifying it via the CLI, rather than hardcoding secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 07:46 AM
Security Audit — agent-trust-hub — mayar-v2